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RECEIVED 

TN THE CLAIMS CENTRAL FAX CENTER 

APR 0 A 2007 

1 (Currently amended) A real-time virus tracking and display system for use with a 

distributed computer network, the system comprising: 

a plurality of client users having potentially infected client end-user computers, said end- 
user computers being distributed over said distributed computer network; 

e^eas^fte a first anti-virus scanning server executing software from a first vendor and a 
«*nnd anti-virus tannine server m uting software from a shnonrt vendor, each accessible via 
the distributed computer network, said first anu-virus scanning server and said second anti-vir us 
.inning server each including an anti-virus scanning program, whereby the client users contact 
The first scanning server or the second s canning server to facilitate virus scanning of the client 
end-user computers by downloading said anti-virus scanning program; 

a scan log which is sent back m at least one o f the firsi anti-virus scanning server andth e 
second anti-v^'g scanning server over said distributed computer network from each client user 
detailing ecrtain some or all of the r esults of the virus scanning on each client end-user computer 
by said antivirus scanning program; 

a virus-tracking server for receiving the scan log information from said client end-user 
computers in real-time via the first anti-virus scann in p server from the first vendor and the 
second anti-virus scanning server from the second vendor: 

a database server associated with the virus-tracking server for processing the scan log 
information into virus-Tracking information; and 

at least one virus tracking display mode accessible by a tracking user from the virus 
tracking server, the display mode providing real-time updates of said virus tracking information 
pertaining to the scan ln^ wherein the anti-vim * tannine program residing at the qUent end- 
user computers generates one or more maos displaying The rea l-time updates and wherein the 
one or more mans are generated and displayed at the cli ent end-user computers. 



2 



PAGE 4/10 * RCVD AT 4/412007 2:42:53 PIYI [Eastern Daylight Time] ' SVR:USPT0-EFXRF-1/12 * DNIS:2738300 ■ CSID:612 825 6304 ' DURATION (mm-ss):0248 



APR-Q4-2007 12:48 FROM-BEYER WEAVER THOMAS 



612-825-6304 



T-832 P. 005/010 F-786 



2 (Previously presented) The system according to Claim 1, wherein the tracking 

user can configure the display mode, to show the virus-tracking information in association with 



user-selected geographic maps of where the viruses are occumng. 



3. (Previously presented) The system according to Claim 2, wherein me display 

modes includes a plurality of web pages with user selectable menus to configwe the virus 
tracking display mode on the pages. 



4. (Previously presented) The system according to Claim 1, wherein the scan log 
information contains no information relating to the direct identification of the client user. 



5. (Previously presented) The system according to Claim 4, wherein the scan log 
information includes the name of ihe virus, the frequency of its occurrence, and the geographic 
location of the infecied computer. 



6. (Previously presented) The system according to Claim 1 , wherein a servlet 
program on the virus-tracking server is used to receive the scan log information from the at least 
one anti-virus scanning server. 



7. (Previously presented) The system according to Claim 1 , wherein a polling 
program is used to regularly retrieve the virus tracking information from the database server and 
store it in a data object. 



8. (Previously presemed) The system of Claim 7, wherein a common gateway 

interface (CGI) program is used to retrieve the data object for display by the tracking user. 
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9. (Previously presented) The system of Claim 1. wherein a Java applet running on a 
tracking user browser is used to display a real-lime virus trace map. 



10. (Previously presented) The system of Claim 1 , wherein the client user is also the 

tracking user. 



1 1 . (Previously presented) The system of Claim 1 , wherein the distributed computer 

network includes the Internet, wherein said scan log from each scanned client computer is sent 
back over the Internet to be received by said virus tracking server, and wherein said virus 
tracking display mode is accessible over the Internet by said tracking user. 
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12. (Currently amended) A method to provide real-time virus tracking and display 

for use with a distributed computer network, the method comprising: 

providing an anti-virus scanning program to n rUr nt end-user computer, ********* 
from a llrst anti-virus scanning server nrmt flnp software ftorr , n fim wnr frr or from a s^ond 
==± ^ inning serv er exe cuting -n tW fro m » second vendpr, each accesstble v,a the 
distributed computer network; 

invoking the anti-virus scanning program from a plurality of client users having 
potentially infected client end-user computers by downloading said wittvinw scanning proftta m, 
^..^r corr r— distributed over said di stributed com puter network ; 

generating a scan log from each scanned client endzuser computer and sending the scan 
log back from each client user nvor said distributed computer network, the scan log detailing 
o cn ain cn^nrall of the r esults of the scanning program on each client end^oser computer; 

receiving the scan log information from said client endj^er computers in real-time atthe. 
fi T * .nti-vims s ^nnin p ^rver ancj »h« ^nd ami-vims scanning server and rransn>mi"R the 

^information to via a virus tracking server associated with the distributed computer 
netw ork ™ pa hlo of operat e with anti-virus inning servers from multiple vendors ; 

processing the scan log information into virus tracking information and storing it on a 
database server associated with the virus-tracking server; and 

retrieving the virus tracking information .from the virus-tracking server; and 

displaying a real-time trace on a tracking user device on the client end-user computer 
„^ the ami- ™.* scanning nro f"*™ wherein real-time trace data are display ^ in one or more 
^ r r<W rn^H hv the anti-v ims Manning propram on the c%nt end-user computer . 



13. (Previously presented) The method according to Claim 1 2, which further includes 

configuring display modes by the tracking user to show the virus-tracking information in 
associaiion with uscr-selccted geographic maps of where the viruses are occurring. 
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14 (Previously presented) The method according to Claim 1 3, which further includes 

displaying the display modes via a plurality of web page, with user selectable menus to 
configure the virus-tracking information on the pages. 



15. (Original) The method according to Claim 12, wherein the scan log contains no 
information relating to the direct identification of the client user. 



16. (Original) The method according to Claim 15, wherein the scan log includes the 
name of the virus, the frequency of its occurrence, and the geographic location of the infected 
computer. 



17. (Previously presented) The method according to Claim 12, which further includes 

providing a servlct program on the virus-tracking server to receive the scan log from the at least 
one anti-virus scanning server. 



18. (Previously presented) The method according to Claim 12, which further includes 

providing a polling program to regularly retrieve virus tracking information from the database 
server and store it in a data object. 



1 9. (Original) The method of Claim 1 8, which further includes providing a common 
gateway interface (CGI) program to retrieve the data object for display by the tracking user. 



20. (Previously presented) The method of Claim 12, which further includes running a 

Java applet on the browser of the tracking user device to display a real-time virus trace map. 



6 



PAGE 8(10 ' RCVD AT 4(4/2007 2:42:53 PM [Eastern Daylight Time] « SVR:USPT0-EFXRF-1/12* DNIS:2738300 ' CSIO:612 825 6304 ' DURATION (mm-ss):0248 



' APR-04-2007 12:49 F ROM-BEYER WEAVER THOMAS 612-825-6304 T-832 P. 009/010 F-786 



. . * a\ The method of Claim 12, wherein the cliem user is also 

2 1 . (Previously presented) l ne meinoo ui 

the tracking user. 



22 (Previously presented) The method of Claim 12, wherein the distributed 

computer network includes the Internet, wherein said scan log from each scanned client 
computer is sent back over the Internet to be received by said virus tracking server, and wherem 
said red-time trace displayed on said tracking user device is made available over the Internet. 

.3 (Previously presented) The system according to claim 1 wherein said virus 

tracking information identifies concentrations of a computer virus at said client end-user 

computer locations, 

,4 (Previously presented) The system according to claim 1 wherein said scan 

log information is processed by aggregating said scan logs from each client end-user computer 
and then synthesizing said virus tracking information. 

25 (Previously presented) The method according to claim 12 wherein said 

virus tracking information identifies concentrations of a computer virus at said client end-user 
computer locations > 

26. (Previously presented) The method according to claim 12 wherein 

processing said scan log information includes 

aggregating said scan logs from each client end-user computer, and 
synthesizing said virus tracking information from said aggregated scan logs. 
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